Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/779928-881c-433a-b243-c9f57e959ef1/1/ZuApx1lJ6PZTaa1PSofxEZnETW8.roa
File: ZuApx1lJ6PZTaa1PSofxEZnETW8.roa (raw, json)
Hash identifier: i6ZjtL8jp8h1GWVt1Wew7Qku5Nc6QBUB0tBwDCSGXU8=
Subject key identifier: 66:E0:29:C7:59:49:E8:F6:53:69:AD:4F:4A:87:F1:11:99:C4:4D:6F
Certificate issuer: /CN=0692c5f16313653425bc467105875e3a297cff9b
Certificate serial: 0198DB50A1146642E7B4702F4247C85F06A4
Authority key identifier: 06:92:C5:F1:63:13:65:34:25:BC:46:71:05:87:5E:3A:29:7C:FF:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BpLF8WMTZTQlvEZxBYdeOil8_5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/779928-881c-433a-b243-c9f57e959ef1/1/ZuApx1lJ6PZTaa1PSofxEZnETW8.roa
Signing time: Sun 24 Aug 2025 09:02:31 +0000
ROA not before: Sun 24 Aug 2025 09:02:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209847
IP address blocks: 77.91.100.0/24 maxlen: 24
77.91.101.0/24 maxlen: 24
77.91.102.0/24 maxlen: 24
77.91.103.0/24 maxlen: 24
77.91.122.0/24 maxlen: 24
77.91.123.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/779928-881c-433a-b243-c9f57e959ef1/1/BpLF8WMTZTQlvEZxBYdeOil8_5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/779928-881c-433a-b243-c9f57e959ef1/1/BpLF8WMTZTQlvEZxBYdeOil8_5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/BpLF8WMTZTQlvEZxBYdeOil8_5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 17:17:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:db:50:a1:14:66:42:e7:b4:70:2f:42:47:c8:5f:06:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0692c5f16313653425bc467105875e3a297cff9b
Validity
Not Before: Aug 24 09:02:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=66e029c75949e8f65369ad4f4a87f11199c44d6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:f1:2b:88:89:17:90:1a:ea:6d:b9:ab:10:58:
2e:ae:d1:ff:9a:0b:12:91:4d:f8:ff:47:e7:3a:20:
33:09:80:a3:08:fa:a5:01:68:29:ed:c6:45:20:da:
ea:ba:d2:30:fc:a7:aa:93:b6:32:ec:ce:74:79:18:
fa:c5:f6:26:33:e9:81:4d:fd:dd:d8:4f:8c:83:a9:
7a:40:74:dc:57:6d:c1:87:91:10:34:46:20:b8:1b:
b0:5b:c1:90:f5:e3:55:55:03:ce:2a:5f:73:26:6e:
89:a5:ec:79:d4:5d:0c:50:f6:aa:bc:ab:48:c4:f4:
86:a1:0b:79:05:c5:99:29:08:a9:47:ee:9f:76:6b:
14:e8:4b:c7:87:cc:f7:5a:15:92:f9:b0:6c:86:1f:
dd:fd:19:d6:6c:0f:05:f9:06:4f:12:2a:9c:e2:c2:
04:77:65:0b:31:62:37:1e:60:04:12:35:51:a7:5f:
96:bd:fa:c8:ab:23:98:df:80:8d:b5:b1:87:47:4f:
b3:63:e7:30:f6:4c:8b:6d:2d:45:fa:f2:18:44:43:
f9:49:7b:23:05:0c:6d:71:9a:87:4c:10:8c:cb:fa:
00:f3:9a:65:56:63:d0:c0:a6:44:ff:94:ab:19:d6:
b7:a8:3c:5a:4b:71:08:3b:84:3e:95:03:31:54:2d:
94:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:E0:29:C7:59:49:E8:F6:53:69:AD:4F:4A:87:F1:11:99:C4:4D:6F
X509v3 Authority Key Identifier:
keyid:06:92:C5:F1:63:13:65:34:25:BC:46:71:05:87:5E:3A:29:7C:FF:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BpLF8WMTZTQlvEZxBYdeOil8_5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/779928-881c-433a-b243-c9f57e959ef1/1/ZuApx1lJ6PZTaa1PSofxEZnETW8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/779928-881c-433a-b243-c9f57e959ef1/1/BpLF8WMTZTQlvEZxBYdeOil8_5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.91.100.0/22
77.91.122.0/23
Signature Algorithm: sha256WithRSAEncryption
87:e2:b1:46:9f:38:51:26:f7:60:ef:be:8e:dd:65:2f:ff:25:
32:00:c6:94:dd:d9:4b:f2:b3:ee:4c:6e:ea:36:18:4a:0e:f9:
41:c6:b0:fc:ea:2c:96:34:8d:33:dc:40:25:60:5a:bc:b9:7b:
d3:36:c5:be:10:05:aa:32:be:fc:93:e6:cf:1b:4e:1e:74:8a:
b0:4d:a3:76:e6:bd:7c:2e:d6:62:5b:95:9d:74:5b:cb:db:ba:
d1:83:f4:ec:d9:ff:f3:b4:db:93:0a:7b:72:ea:01:1c:14:93:
84:cb:9b:d6:a7:95:59:56:88:0f:f3:03:df:83:b0:1c:8b:22:
d0:95:db:ef:4e:ed:38:71:d4:78:4c:78:4a:0f:a7:60:2b:17:
53:a3:5b:1c:c4:02:de:4e:03:1d:42:fb:de:59:b4:2c:a3:49:
23:c2:94:aa:4d:15:93:c6:4d:1f:c9:58:6b:57:c6:fd:eb:41:
d2:bf:3f:d1:56:46:a2:ad:ad:46:e8:07:f4:08:4c:fd:ab:73:
c2:c9:80:67:91:57:58:96:26:a0:c8:46:57:bd:5a:ab:a6:28:
a3:5f:84:13:d3:b8:0d:58:56:36:9d:70:3c:4c:bb:30:0c:eb:
2c:2d:f6:a8:4d:4d:8a:17:05:31:cf:1b:87:35:46:d1:60:78:
58:f6:d1:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 01:43:36 2025 by rpki-client